Email Hack: Help.

• To: World Wide Web Security <WWW-SECURITY@ns2.rutgers.edu>
• Subject: Email Hack: Help.
• From: Doug Breault <dbreault@ns.sprintout.com>
• Date: Mon, 24 Jun 1996 12:42:45 -0400 (EDT)
• In-Reply-To: <960529221557_76702.3557_CHN54-1@CompuServe.COM>

Hello Everyone,

We've got a problem here with a hacker. There's some punk 
apparently hacking a mail server somewhere and sending BS postings all over 
the net regarding get rich quick schemes, etc - from a non-existent 
account on our server. They've done it twice so far, from two different 
non-existent accounts.

1. Is there any authority who we can call about this type of incident?
2. What are the methods one uses to do fake these FROM fields? And is 
   there a way to prevent it?
3. What are the limits of prosecution available, is it typical US justice
   where even if they're caught red handed, nothing is done?

In addition, the culprit is apparently from Canada (from one of the 
mail-me-some-cash addresses contained in the get-rich-quick letter)...which 
is a long drive, but not so long that I won't make it to solve this 
problem if necessary.

All information will be greatly appreciated.
Best regards,
Doug 

• Re: Email Hack: Help.
• From: hallam@Etna.ai.mit.edu
• Re: Email Hack: Help.
• From: T Kruger <krugertl@apci.net>
• Re: Email Hack: Help.
• From: David Tauzell <tauzell@math.umn.edu>
• Re: Email Hack: Help.
• From: Steff Watkins <Steff.Watkins@Bristol.ac.uk>
• Re: Email Hack: Help.
• From: Rob Hartill <hartill@ooo.lanl.gov>
• Re: Email Hack: Help.
• From: "David W. Morris" <dwm@shell.portal.com>

• BoS: CERT Advisory CA-96.11 - Interpreters in CGI bin Directories
• From: David Kennedy <76702.3557@compuserve.com>

• Previous: mail flooding
• Next: Netscape Enterprise Securit
• Index(es):
  • Index
  • Thread